RSA Security Analytics, Updates Needed for ESA Configuration

RSA is notifying customers of a configuration change impacting ESA in 10.5 and 10.6 environments. This configuration is set to determine whether certain services utilize the system clock where ESA is deployed or event time. Dependent on rule logic applied, this setting could have an affect on customers alerts.

Affected Products:

RSA Security Event Stream Analysis upgraded to 10.5 and 10.6

Recommendation:

RSA recommends all customers check and validate the setting on their ESA systems. Full instructions for how to check as well as steps to change and restart have been provided in KB article 32867.